Salesforce Commerce Cloud (SOAP)

Product Overview

With your Cybersource account, the Cyber source plugin for Salesforce Commerce Cloud makes the technical side of things far less complicated. This means you can help keep deployment time and disruption to a minimum and you can get up and running quickly.

Available in Professional, Enterprise, Unlimited and Developer Editions running SFRA 7.0.
This version can be found on the Master branch of the SFRA repository in May 2025.
This version is compatible with Salesforce B2C Commerce 21.2 release.

Integration Features:
- REST API
- SOAP API
- Microform
- 3DSecure
Channels:
- eComm (CNP)
- inApp
Payment Methods:
- Visa
- MasterCard
- Maestro
- American Express
- Discover
- Diners
- Apple Pay
- Google Pay
- Click to Pay
- eCheck
- Alternative Payment Methods:
  - Alipay
  - iDEAL
  - Sofort
  - PayPal (Express Checkout, Credit, Billing Agreement)
  - Klarna (v2)
  - Bancontact
  - WeChat
  - J.Crew
  - ELO
  - Carte Bancaires
Payment Functions:
- Authorisation
- Sale
- Token Management Services (CIT only)
- Network Tokens
- Webhooks (Token Lifecycle Update)
- Tax Calculation
Fraud Management:
- Decision Manager
- Device Fingerprint ID
- Delivery Address Verification

Getting Started

Prerequisite - Salesforce – In order to use the Cyber source Storefront Reference Architecture cartridge please make sure you have an active instance of Salesforce and you have install and configure the SFRA app_storefront_base cartridge. This integration supports Storefront Reference Architecture (SFRA) v7.0.

For general information about Commerce Cloud and SFRA, see the Salesforce B2C Commerce Infocentre (salesforce.com).

Cybersource Prerequisites

You will be able to configure this integration to either Test or Production. If you do not yet have a live Cybersource account, or you wish to first test the integration, then creating a sandbox account will not only allow you to start programmatic integration but also provides access to the Merchant Portal.

Generate REST Keys

Before configurating this integration, you are required to generate your REST keys within your Merchant Portal for both (Live) and (Test)

Sign into your Merchant Portal (Live) or (Test)
Access Payment Configuration -> Key Management
Select the 'Generate Key' button in the top right hand corner
Select your key type as 'REST - Shared Secret' and Generate Key
Copy your Shared Secret Key values and save them securely

Generate SOAP Keys

In addition, you are required to generate SOAP .p12 keys within your Merchant Portal for both (Live) and (Test)

Sign into your Merchant Portal (Live) or (Test)
Access Payment Configuration -> Key Management
Select the 'Generate Key' button in the top right hand corner
Select your key type as 'Simple Order API' and Generate Key
Select Download Key, and save a passwordComplete the download, and save your key securely.

Setup Workspace

Create a 'Cyber source' folder in your workspace and place the cartridge int_Cyber source_sfra (int_Cyber source for controller version) that was downloaded from the marketplace in Step 2

Note if you have a different project setup you will need to open the file /package.json and modify the paths.base value to point to your app_storefront_base cartridge. This path is used by the JS and SCSS build scripts.

If using VSCode, install the extension Phrophet Debugger link or any other SFCC extension and include the following in dw.json().

                {
  "hostname": "your-sandbox-hostname.demandware.net",
  "username": "yourlogin",
  "password": "yourpwd",
  "version": "version_to_upload_to",
  "cartridge": [
              "int_cybersource_sfra",
              "app_storefront_base",
              "modules"
  ]
}

Note if you are using a different IDE please refer to the respective developer guide to setup the workspace.

Build and Upload Code

Prerequisite: Install node under the Cyber source folder

Install sgmf-scripts and copy-webpack-plugin with the following command

                npm install sgmf-scripts && npm install copy-webpack-plugin

Compile the JS and SCSS code with the following command

                npm run compile:js && npm run compile:scss

Upload the code to your Salesforce Commerce Cloud instance

                
npm run uploadCartridge

Configure the Cartridge

Setup the Cartridge path

Go to settings within Business Manager (Administration > Sites > Manage Sites > [your site] > Settings
For Cartridges enter int_Cyber source_sfra:app_storefront_base then select apply

Upload metadata

Go to folder Cyber source/metadata/sfra_meta/sites/
Rename yourSiteID folder name to your site ID - this can be looked up in Administration > Sites > Manage Sites
Zip the sfra_metadata folder
Upload sfra_meta.zip using Site Import & Export - Administration > Site Development > Site Import & Export
Import the uploaded zip file

Upon successful import the following metadata is created:

Site Preferences (Cyber source, Cyber source_SecureAcceptance, Cyber source_Paypal, Cyber source_GooglePay, Cyber source_Klarna, Cyber source_VisaCheckout, Cyber source_BankTransfer, Cyber source_PayerAuthentication, Cyber source_WeChat, Cyber source_Tokenization, Cyber source_TaxConfiguration, Cyber source_DeliveryAddressVerification, Cyber source_DeviceFingerprint, Cyber source_Alipay)
Service (Cyber source.conversiondetailreport, Cyber source.soap.transactionprocessor.generic, Cyber source.http.flextoken)
Payment Processor (KLARNA_CREDIT, Cyber source_ALIPAY, BANK_TRANSFER, Cyber source_WECHAT)
Payment Method
Job (Cyber source: Decision Manager Order Update)

Add Keys and Enable Cartridge

Navigate to Merchant Tools > Custom Preferences > Cyber source Core to add your Cybersource Merchant ID and keys, set the desired endpoint (test/production), and to enable the cartridge.

Additional custom preferences can be configured in Merchant Tools > Custom Preferences

Configure Payment Methods

Navigate to Merchant Tools > Ordering > Payment Methods and select CREDIT_CARD to select the card capture method. Confirm that Payment Processor = Cyber source_CREDIT before proceeding.

To set Microform as thecard capture mechanism, navigate to Merchant Tools > Site Preferences > Custom Preferences > Cyber source_SecureAcceptance, and set Secure Acceptance Type as SA_FLEX. Add your REST keys to Secure Acceptance Flex Shared Secret and Secure Acceptance Flex KeyId, then select the CS Transaction Type according to your preference.

Although we have added flexible integration options, we recommend utilising our Microform solution for capturing card details, this provides a full PCI-A Solution whilst offering flexibility around your chosen UI.

Please refer to the user guide available with the downloaded cartridge for full guidance on configuring all payment methods and additional features.

Ready to Go Live

When you are ready to go live configure the cartridge using your production Cybersource account details.

Further Information

Need more guidance as you implement a Cybersource‑powered solution?
The Cybersource Developer Center offers resources to help merchants and system integrators build reliable, compliant, and well‑tested integrations.

• Explore Cybersource API documentation for payment processing, tokenization, refunds, and reporting to understand how each capability works within your ISV’s integration.
• Review SDK and code sample libraries to accelerate development and align with recommended implementation patterns.
• Access sandbox environment details to validate transaction flows, verify configuration, and complete end‑to‑end testing.
• Consult integration guides for information on authentication, security controls, risk services, and digital channel support.
• Use the Cybersource Support Center for troubleshooting articles, FAQs, and release updates relevant to your integration path.

These resources are designed to help you deploy and manage your ISV solution efficiently, ensuring a smooth payment experience for your customers.